GET multiup.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
104.21.112.1200 OK 1.2 kB URL
multiup.io/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, ASCII text, with very long lines (1238)
First Seen 2023-03-07
Last Seen 2025-08-03
Times Seen 97129
Size 1.2 kB (1239 bytes)
MD5 9e8f56e8e1806253ba01a95cfc3d392c
SHA1 a8af90d7482e1e99d03de6bf88fed2315c5dd728
SHA256 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: application/javascript
last-modified: Mon, 30 Jun 2025 18:08:27 GMT
cache-control: max-age=172800, public
content-encoding: gzip
etag: W/"6862d29b-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ufh4wcVdKn4fk0idcGGP844us8VIDaqINHbZckSR9tNMsBjJiWDLzIgoA%2F51TLzYNIRaaW9rfXVEY9G5pJDH3S4SB4TW1AiUsbx8p1D6MP8e8LaBVWfYR5HkbwcO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 958da38c7acd56c7-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 04 Jul 2025 11:00:20 GMT
GET undefined/T1dyRVcuNREoaC5qEGMiPTtPYGUJckADM3w6RCYlJSIXITF5OFwmOyAiFiMlIDkGazkqI1d3ERoZNTE7Kw8aHRUOJCYXZw4UMxA/BRUkDwMeAjMEAx0COg0BBQAxBBYaBjMMBg0BKCEVChoUBmY8ETQQMH8OMC5vHRYadhocDkABFQYxOj0RCRU3dR0JFSgRASQaIwM7KwAkAxoVAjMpDh4BRwcUIzArA2d7FDEXPBUSJC49HhErAAMjMzQQEgIUMT0SFwYKLRYdZxokH38VOhYWGTUhdQErFQspFh1nGgEWKCM2ERUJDjh0FQQVMAsDHgFCDRwaejANBAoOFhQSFmIwEz8dAEIiMxs7FgMffhI7AT8/MzAsZhcFJy4SGGYgAwQdESgTBQIFICJjCxAVBAUYBDwABDgVNBMBAhkxEzhpPQEqOT9qPhElFmYCBg0MFAY
0.0.0.0 0 B URL
undefined/T1dyRVcuNREoaC5qEGMiPTtPYGUJckADM3w6RCYlJSIXITF5OFwmOyAiFiMlIDkGazkqI1d3ERoZNTE7Kw8aHRUOJCYXZw4UMxA/BRUkDwMeAjMEAx0COg0BBQAxBBYaBjMMBg0BKCEVChoUBmY8ETQQMH8OMC5vHRYadhocDkABFQYxOj0RCRU3dR0JFSgRASQaIwM7KwAkAxoVAjMpDh4BRwcUIzArA2d7FDEXPBUSJC49HhErAAMjMzQQEgIUMT0SFwYKLRYdZxokH38VOhYWGTUhdQErFQspFh1nGgEWKCM2ERUJDjh0FQQVMAsDHgFCDRwaejANBAoOFhQSFmIwEz8dAEIiMxs7FgMffhI7AT8/MzAsZhcFJy4SGGYgAwQdESgTBQIFICJjCxAVBAUYBDwABDgVNBMBAhkxEzhpPQEqOT9qPhElFmYCBg0MFAY
IP / ASN
0.0.0.0
#0
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /T1dyRVcuNREoaC5qEGMiPTtPYGUJckADM3w6RCYlJSIXITF5OFwmOyAiFiMlIDkGazkqI1d3ERoZNTE7Kw8aHRUOJCYXZw4UMxA/BRUkDwMeAjMEAx0COg0BBQAxBBYaBjMMBg0BKCEVChoUBmY8ETQQMH8OMC5vHRYadhocDkABFQYxOj0RCRU3dR0JFSgRASQaIwM7KwAkAxoVAjMpDh4BRwcUIzArA2d7FDEXPBUSJC49HhErAAMjMzQQEgIUMT0SFwYKLRYdZxokH38VOhYWGTUhdQErFQspFh1nGgEWKCM2ERUJDjh0FQQVMAsDHgFCDRwaejANBAoOFhQSFmIwEz8dAEIiMxs7FgMffhI7AT8/MzAsZhcFJy4SGGYgAwQdESgTBQIFICJjCxAVBAUYBDwABDgVNBMBAhkxEzhpPQEqOT9qPhElFmYCBg0MFAY HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET multiup.io/favicon.ico
104.21.112.1200 OK 854 B URL
multiup.io/favicon.ico
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
First Seen 2023-04-30
Last Seen 2025-07-30
Times Seen 838
Size 854 B (854 bytes)
MD5 53bfb4a8399c379e6857b5e848d3a408
SHA1 6c59da45ce3e443722a71c4cfaaa92a990e17610
SHA256 9f55eab5447f560225a66911fcbe9edca0c35c7da9ca994bf6f7e5af6881b11e
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /favicon.ico HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6; timezone=Africa/Abidjan
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:22 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wfEYw5%2FYtodhto6OzGOuMiwWpvoxte%2FnbS2l07fBA%2FmKaDwI57UZM9W8EJTINdUIxJvfXAYe1w0M%2FY0bNDcj6H8sVpdsKSFzChCwwQ8j4O%2FLzx64hvJQp7X05v9L"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 07 Aug 2020 09:03:58 GMT
etag: W/"5f2d18fe-356"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 6696
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da3965b4c56c7-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1379&min_rtt=0&rtt_var=1148&sent=450&recv=120&lost=0&retrans=0&sent_bytes=526883&recv_bytes=9931&delivery_rate=13680826&ss_exit_cwnd=36120&ss_exit_reason=2&cwnd=36116&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=1849&inflight_dur=133&x=40"
OPTIONS cloudflareinsights.com/cdn-cgi/rum
104.16.80.73200 OK 0 B URL
cloudflareinsights.com/cdn-cgi/rum
IP / ASN
104.16.80.73
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject cloudflareinsights.com
Fingerprint 9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
Validity Wed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://multiup.io/
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 11:00:23 GMT
content-type: text/plain
access-control-allow-origin: https://multiup.io
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 958da39c7c27b4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
GET multiup.io/build/runtime.0b137493.js
104.21.112.1200 OK 1.4 kB URL
multiup.io/build/runtime.0b137493.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, ASCII text, with very long lines (1399), with no line terminators
First Seen 2023-03-08
Last Seen 2025-07-30
Times Seen 846
Size 1.4 kB (1399 bytes)
MD5 0b4fc9b3ef5d80f5ed570385eee3fa4c
SHA1 397c84c672e54103fa082f592f83e8afb6961af5
SHA256 582c9d450dcfaf9d550547fc8e22f5da17262c8f4ce6d283c0357e94e4803937
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/runtime.0b137493.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZiTM7Sb8PxYGp2UkUp%2Bh%2BB3ez2jSsmmQvis1dTWP3ElFkDJQiTZwwDc8Pfe2eX2dVlfucVcvY4Zb7BM4HthKsBNVIgoI38OtsBTWLmAeSBv%2BAyrGqZsBZi9PR%2FO"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-577"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 5777
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da38c7ace56c7-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3109&min_rtt=750&rtt_var=1849&sent=62&recv=85&lost=0&retrans=0&sent_bytes=7597&recv_bytes=7317&delivery_rate=576384&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18060&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=265&inflight_dur=29&x=40"
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
173.194.221.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP / ASN
173.194.221.84
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
Validity Tue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:qtcASeifv9RIh0pY3XdiG2B8vWAcPQ:1N4RlpcYTqAy36MI; Expires=Fri, 02-Jul-2027 11:00:22 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 11:00:22 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMRWAOCp-TE4SWq-beJa8wrghT2yuqqXQntvY2RbYkL1hFYdbjsk-NTz321Wzh6mMTlxbiAgg
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-LGMcVDhb-ne59V3aWWDBoQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOze_rY5glHwKe6oGv8B8PJRBOUZ1ZnddtGFz3niI3fkTg6Aay--2CIpEcEiLBnL6TVIK7FZA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S824190531%3A1751454022343019
173.194.221.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOze_rY5glHwKe6oGv8B8PJRBOUZ1ZnddtGFz3niI3fkTg6Aay--2CIpEcEiLBnL6TVIK7FZA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S824190531%3A1751454022343019
IP / ASN
173.194.221.84
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
Validity Tue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOze_rY5glHwKe6oGv8B8PJRBOUZ1ZnddtGFz3niI3fkTg6Aay--2CIpEcEiLBnL6TVIK7FZA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S824190531%3A1751454022343019 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 11:00:22 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-FQFuTL_XxELaiIyfj-8OIA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.d0E18SHIxFg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/build/610.15f042f0.js
104.21.112.1200 OK 1.1 MB URL
multiup.io/build/610.15f042f0.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65464)
First Seen 2025-06-14
Last Seen 2025-07-26
Times Seen 17
Size 1.1 MB (1101152 bytes)
MD5 edbc3ed873294767afe5ae92d111f483
SHA1 8caed809766b2693c71efea53d7feab42328ff91
SHA256 fb0a537c525ebb62a7551c86310529c5bf8516770755e3059a2bd1e84a3ec318
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/610.15f042f0.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cGoq%2Bf4Ngvp9XVRPvy4SQj%2Fk%2F85w%2BC1q%2BTD0zrW6QcD5oZdJv4WBbohACS%2FNDXZKCgyr5cfW1AzYOXXgP8youfJJopvThj8wIaA1kP35YCVxOHiT7kvk4Rq0B3Zm"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-10cd60"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 5777
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da38c7acf56c7-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3109&min_rtt=750&rtt_var=1849&sent=71&recv=85&lost=0&retrans=0&sent_bytes=15777&recv_bytes=7317&delivery_rate=576384&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18060&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=267&inflight_dur=31&x=40"
GET riraconianstar.com/ZHMzemJLTFAJXyokAg8vCBhyIg49NlENOAUkch4UJTVDGyAJABUOCwBOAktbUkcLTkQUGldHU1xVQA4DEAZAR1NCGl0cDVlVRUdTSkMdSExRVUZHU0IHQxsFWUIVChYQHw5LVVFCB09WVEECSFZQ
172.67.136.180204 No Content 0 B URL
riraconianstar.com/ZHMzemJLTFAJXyokAg8vCBhyIg49NlENOAUkch4UJTVDGyAJABUOCwBOAktbUkcLTkQUGldHU1xVQA4DEAZAR1NCGl0cDVlVRUdTSkMdSExRVUZHU0IHQxsFWUIVChYQHw5LVVFCB09WVEECSFZQ
IP / ASN
172.67.136.180
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject riraconianstar.com
Fingerprint DB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
Validity Wed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
GET /ZHMzemJLTFAJXyokAg8vCBhyIg49NlENOAUkch4UJTVDGyAJABUOCwBOAktbUkcLTkQUGldHU1xVQA4DEAZAR1NCGl0cDVlVRUdTSkMdSExRVUZHU0IHQxsFWUIVChYQHw5LVVFCB09WVEECSFZQ HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 11:00:21 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FrMcUwbgxpHJxuBU4U8kHfHlBY7X%2B%2Bop%2BRNTTnNrfKiFQNGc1IOIsO00bsRWgLSUH%2B5UakucSk%2BOjdSN%2B8lY5Ux0jVI8GYpcmJ6nJOJfQx0%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 958da3912fdeb4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 878
Size 28 kB (28192 bytes)
MD5 7e08cc656863d52bcb5cd34805ac605b
SHA1 f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
SHA256 0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
Validity Mon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:17:47 GMT
expires: Fri, 26 Jun 2026 10:17:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 520954
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPOfW5AkJDnBsZz4ZiEPK6a6iMCe-oNdQuTqCNdcGI54NZrBTuUGkd-oAIptMhtZG-5U6D8wQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1529295487%3A1751454022379550
173.194.221.84403 Forbidden 0 B URL
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPOfW5AkJDnBsZz4ZiEPK6a6iMCe-oNdQuTqCNdcGI54NZrBTuUGkd-oAIptMhtZG-5U6D8wQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1529295487%3A1751454022379550
IP / ASN
173.194.221.84
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject *.google.com
Fingerprint 42:6B:40:5C:3D:9A:84:17:1F:6E:69:4F:66:1C:88:49:15:40:EB:36
Validity Tue, 17 Jun 2025 20:01:52 GMT - Tue, 09 Sep 2025 20:01:51 GMT
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPOfW5AkJDnBsZz4ZiEPK6a6iMCe-oNdQuTqCNdcGI54NZrBTuUGkd-oAIptMhtZG-5U6D8wQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1529295487%3A1751454022379550 HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 11:00:22 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-dbz-rIhyfXkayNglP4u3kQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
content-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.d0E18SHIxFg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET static.cloudflareinsights.com/beacon.min.js
104.16.80.73200 OK 20 kB URL
static.cloudflareinsights.com/beacon.min.js
IP / ASN
104.16.80.73
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
First Seen 2024-06-07
Last Seen 2025-08-03
Times Seen 102196
Size 20 kB (19948 bytes)
MD5 ec18af6d41f6f278b6aed3bdabffa7bc
SHA1 62c9e2cab76b888829f3c5335e91c320b22329ae
SHA256 8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
Certificate Info
Issuer Google Trust Services
Subject cloudflareinsights.com
Fingerprint 9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
Validity Wed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 958da38cec01b4ff-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMRWAOCp-TE4SWq-beJa8wrghT2yuqqXQntvY2RbYkL1hFYdbjsk-NTz321Wzh6mMTlxbiAgg
173.194.221.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMRWAOCp-TE4SWq-beJa8wrghT2yuqqXQntvY2RbYkL1hFYdbjsk-NTz321Wzh6mMTlxbiAgg
IP / ASN
173.194.221.84
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
Validity Tue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AdBytiMRWAOCp-TE4SWq-beJa8wrghT2yuqqXQntvY2RbYkL1hFYdbjsk-NTz321Wzh6mMTlxbiAgg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:fNL1nWbCzbiTFsBMBmdxiQflvWtnVw:xKDZ2-t7M4YKBWiN;Path=/;Expires=Fri, 02-Jul-2027 11:00:22 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 11:00:22 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AdBytiPOfW5AkJDnBsZz4ZiEPK6a6iMCe-oNdQuTqCNdcGI54NZrBTuUGkd-oAIptMhtZG-5U6D8wQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1529295487%3A1751454022379550
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-rkEAtb7qXZl3t-Bvyywtgw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 418
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
142.250.74.35200 OK 26 kB URL
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu
First Seen 2023-04-09
Last Seen 2025-07-30
Times Seen 902
Size 26 kB (26488 bytes)
MD5 c045b73d86803686f4cd1cc3f9ceba59
SHA1 92d652578c531e2c3d9db4622584f6a1ab2c225a
SHA256 927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
Validity Mon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:17:47 GMT
expires: Fri, 26 Jun 2026 10:17:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 520956
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET xz.pipidroods.com/sPxGIrHdA0S/125824
172.255.103.170200 OK 6 B URL
xz.pipidroods.com/sPxGIrHdA0S/125824
IP / ASN
172.255.103.170
#7979 SERVERS-COM
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type ASCII text, with no line terminators
First Seen 2023-03-07
Last Seen 2025-08-03
Times Seen 9144
Size 6 B (6 bytes)
MD5 4fc71bf68a1d477bd1523733e34d1e90
SHA1 15119105cffbe108b6cf290146ab02c9aa8517ba
SHA256 74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
Certificate Info
Issuer Let's Encrypt
Subject xz.pipidroods.com
Fingerprint D3:6F:30:24:1A:FA:8F:7D:31:D0:70:C1:D0:FE:6F:0F:FC:A1:9D:81
Validity Sun, 15 Jun 2025 22:00:36 GMT - Sat, 13 Sep 2025 22:00:35 GMT
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sPxGIrHdA0S/125824 HTTP/1.1
Host: xz.pipidroods.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 02 Jul 2025 11:00:20 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 6
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Origin
Access-Control-Expose-Headers: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Megageocheckolololo, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires, Credentials
Access-Control-Allow-Methods: GET, HEAD, POST, PUT, OPTIONS
Set-Cookie: GGI10=G/IAAASeD7dNK/dmKv8IjKne3vVF23LHD4p/239bRbcCCoMg63NMJOcmHtdgLENcdVb9C/8fcU22F4TMszPXDn3bi0JM1sszQtMiPRle3iuF+nW+PadvTJQWghuEE2erh7OxP8CGug0ouFXNMz9sX8bofOhPVVBMTsv72LAiF5aGU46qKWF8uZ1fb+RKCE0MoKV13JEH4pvoZXocf6ywyRddqbWmm1R6/v8=; max-age=3600000; path=/; secure; SameSite=None
GUI4=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; max-age=3600000; path=/; secure; SameSite=None
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
GET multiup.io/assets/javascripts/theme.custom.js
104.21.112.1200 OK 5.5 kB URL
multiup.io/assets/javascripts/theme.custom.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, ASCII text
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 260
Size 5.5 kB (5475 bytes)
MD5 1dcaf4e6787e765638bc4efbe93d4d20
SHA1 61c72e21b6cb876b88796a8171888a22c98145fc
SHA256 bafb4c01920ef2f70e7576877c4ae8337430bab45d9989bccdb5aa8ceac1c3b6
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /assets/javascripts/theme.custom.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wrR2cr%2BgXTqBq3mdgBoKuBjCPAp5HJ8HAHYmvBJhA%2B7rNDFr5QZRkQMTwdlvd9IxJdjc4JtMt3S4i5V%2FoSaGZcM0l6BDf9Z6d6oGnY%2BO5Boueg%2BnrWgq28yUW%2Fw"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 13 Jun 2020 12:23:25 GMT
vary: Accept-Encoding
etag: W/"5ee4c53d-1563"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 5777
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da38c8ad256c7-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2185&min_rtt=0&rtt_var=1950&sent=165&recv=91&lost=0&retrans=0&sent_bytes=142417&recv_bytes=7590&delivery_rate=5596764&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=36120&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=292&inflight_dur=56&x=40"
GET d3m6crjuedf6o.cloudfront.net/?jrcmd=1195868
3.167.7.11200 OK 233 kB URL
d3m6crjuedf6o.cloudfront.net/?jrcmd=1195868
IP / ASN
3.167.7.11
#0
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)
First Seen 2025-07-02
Last Seen 2025-07-02
Times Seen 1
Size 233 kB (233007 bytes)
MD5 fae6b77ff42648e77f07ac37938446ed
SHA1 bdd63e35fbb891a78c325433318bddded6a7eae1
SHA256 3eae2155460c0611970f7dc383981bbd56356572cc6e6345455c11c36ac51143
Certificate Info
Issuer Amazon
Subject *.cloudfront.net
Fingerprint 8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
Validity Mon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
GET /?jrcmd=1195868 HTTP/1.1
Host: d3m6crjuedf6o.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 79424
date: Wed, 02 Jul 2025 11:00:20 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 3da6f6abdf7146387ea7a7f42136c780.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 2M2wH1Eowf_vLl0pAaAy0refak0sg8Con7gPYvJ9Vxh4kAGbAYzj9Q==
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
142.250.74.35200 OK 26 kB URL
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansRegular1.10;1ASC;OpenSans-Regu
First Seen 2023-04-09
Last Seen 2025-07-30
Times Seen 902
Size 26 kB (26488 bytes)
MD5 c045b73d86803686f4cd1cc3f9ceba59
SHA1 92d652578c531e2c3d9db4622584f6a1ab2c225a
SHA256 927658fe940c899225567ad7885c40a7871dee09c2b9f00d31f7ca62d1f424fc
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
Validity Mon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17857
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:17:47 GMT
expires: Fri, 26 Jun 2026 10:17:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:44 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 520954
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET tofinaukncecafv.org/YXpCcVQAGCEcawBHIFchExZ/VGYnX3A3MFIXdBImCw8nFTJXFWwSOA4PJhcmDhQ2XzoEDmdDEiojFRYsLAALMhZQQxQ1BjQ4FCBgJS8ENBEiDRArAAo8ACcjBSwaNA4EPBM3ETACNTgWGR4YIAVVPRMgYTUzcx0HBxclMBdQDQQ3FjQpFCBgIig1IwU5LBQSAA0oJiQCGSAEQB42O3MkEicvGyMWUBUNIAUgORcaFgc/Ax0DNzgTJBcwAicpBhI4GidtNSgEAWcjEjojADA3BjY8ODgaQDAFPCoCASArCyEcIysAMDgjIwoGGTkvKx4BICsLJhU3V3o3FgooIBIsODsXIxUpODoVByoSEzMVCTcnNxUjABc3JycyEzsdNSsPNQIwKw4mOBYiFwhgJTs1PwY2OwM1FVEoIzACNxgHBmU5IgcBETYUITIVNywFMAY3Mho3P0cQMR46EUcjM2UCNxgQNwxM
18.165.122.10200 OK 3.1 kB URL
tofinaukncecafv.org/YXpCcVQAGCEcawBHIFchExZ/VGYnX3A3MFIXdBImCw8nFTJXFWwSOA4PJhcmDhQ2XzoEDmdDEiojFRYsLAALMhZQQxQ1BjQ4FCBgJS8ENBEiDRArAAo8ACcjBSwaNA4EPBM3ETACNTgWGR4YIAVVPRMgYTUzcx0HBxclMBdQDQQ3FjQpFCBgIig1IwU5LBQSAA0oJiQCGSAEQB42O3MkEicvGyMWUBUNIAUgORcaFgc/Ax0DNzgTJBcwAicpBhI4GidtNSgEAWcjEjojADA3BjY8ODgaQDAFPCoCASArCyEcIysAMDgjIwoGGTkvKx4BICsLJhU3V3o3FgooIBIsODsXIxUpODoVByoSEzMVCTcnNxUjABc3JycyEzsdNSsPNQIwKw4mOBYiFwhgJTs1PwY2OwM1FVEoIzACNxgHBmU5IgcBETYUITIVNywFMAY3Mho3P0cQMR46EUcjM2UCNxgQNwxM
IP / ASN
18.165.122.10
#16509 AMAZON-02
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type HTML document, ASCII text, with very long lines (3059), with no line terminators
First Seen 2025-07-02
Last Seen 2025-07-02
Times Seen 1
Size 3.1 kB (3059 bytes)
MD5 3274d70c825836b654cdded8d732b0bf
SHA1 e9e9fcecafdf207706b03c037364710824e3dbbb
SHA256 891b7a7001453f0be776fd8d3df1a0da838b4bac0ecce5ce95d706b0bbcb90ff
Certificate Info
Issuer Amazon
Subject tofinaukncecafv.org
Fingerprint 44:A3:35:6A:86:CD:E5:69:BD:E3:DE:AB:FC:80:77:A5:E1:5E:E0:47
Validity Wed, 18 Jun 2025 00:00:00 GMT - Fri, 17 Jul 2026 23:59:59 GMT
GET /YXpCcVQAGCEcawBHIFchExZ/VGYnX3A3MFIXdBImCw8nFTJXFWwSOA4PJhcmDhQ2XzoEDmdDEiojFRYsLAALMhZQQxQ1BjQ4FCBgJS8ENBEiDRArAAo8ACcjBSwaNA4EPBM3ETACNTgWGR4YIAVVPRMgYTUzcx0HBxclMBdQDQQ3FjQpFCBgIig1IwU5LBQSAA0oJiQCGSAEQB42O3MkEicvGyMWUBUNIAUgORcaFgc/Ax0DNzgTJBcwAicpBhI4GidtNSgEAWcjEjojADA3BjY8ODgaQDAFPCoCASArCyEcIysAMDgjIwoGGTkvKx4BICsLJhU3V3o3FgooIBIsODsXIxUpODoVByoSEzMVCTcnNxUjABc3JycyEzsdNSsPNQIwKw4mOBYiFwhgJTs1PwY2OwM1FVEoIzACNxgHBmU5IgcBETYUITIVNywFMAY3Mho3P0cQMR46EUcjM2UCNxgQNwxM HTTP/1.1
Host: tofinaukncecafv.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1199
date: Wed, 02 Jul 2025 11:00:22 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=9i3rxmjX/ZVyoaeCVYVZbyU3OJwDIkzfCHj7udkuHyVM6Vh5BnuXHnEFO+6jHVEwa/sm2JtwowzfVaH4X8yz0M9qRtf/sDp9BX5mKDqq6FA1qdM2hBE9Ut+Do7vx; Expires=Wed, 09 Jul 2025 11:00:21 GMT; Path=/
AWSALBCORS=9i3rxmjX/ZVyoaeCVYVZbyU3OJwDIkzfCHj7udkuHyVM6Vh5BnuXHnEFO+6jHVEwa/sm2JtwowzfVaH4X8yz0M9qRtf/sDp9BX5mKDqq6FA1qdM2hBE9Ut+Do7vx; Expires=Wed, 09 Jul 2025 11:00:21 GMT; Path=/; SameSite=None
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a3e8473f1ae4b9f43e92c95af9370bbc.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: i2DfY3hZZCbcPXmLgm4wI6njSU8VDjHTcEpjph2PbDH9vnefmxWjNg==
X-Firefox-Spdy: h2
GET multiup.io/build/images/gray_jean.ced81a01.png
104.21.112.1200 OK 14 kB URL
multiup.io/build/images/gray_jean.ced81a01.png
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type PNG image data, 150 x 150, 8-bit grayscale, non-interlaced
First Seen 2023-04-30
Last Seen 2025-07-30
Times Seen 849
Size 14 kB (13475 bytes)
MD5 e3d55104d9a9f186da3df4f730b77f4d
SHA1 7e5e6e302e5ac36d5d45ed171cda5c3ccb182d13
SHA256 7037cba1540dc0d8eaec93c3d6f978f6757b72ed63177e6c458f738872fa3224
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/images/gray_jean.ced81a01.png HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/build/app.3a8e05b1.css
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:21 GMT
content-type: image/png
content-length: 13475
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2FIiGqeuQqyVhlH7Ej2MrBriIj9mO0rbmguwwhQmQwkN9pBtZWtDeDoU6UfJ7pYDjRau3J3947IugthU1URvwNFKNQofXM6XQCy8AuaW3RqBqQ%2BRjRcYOZ4qG%2FMX"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-34a3"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 5778
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 958da3915b0d56c7-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=727&min_rtt=0&rtt_var=574&sent=379&recv=113&lost=0&retrans=0&sent_bytes=432901&recv_bytes=8944&delivery_rate=13680826&ss_exit_cwnd=36120&ss_exit_reason=2&cwnd=36002&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=1047&inflight_dur=102&x=40"
GET multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
104.21.112.1200 OK 49 kB URL
multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Resource Info
File type HTML document, Unicode text, UTF-8 text, with very long lines (2342)
First Seen 2025-07-02
Last Seen 2025-07-02
Times Seen 1
Size 49 kB (49170 bytes)
MD5 18522f89524f3ebfc8ff1686bb352f88
SHA1 f57569baa7a28fd0e4aec4d2da5a1783945d2944
SHA256 2d895be527f7a4a7d604c0afd446d3ba691f68e0108f8e7695715ef5e484a1d2
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cache-control: max-age=0, must-revalidate, private
pragma: no-cache
expires: Wed, 02 Jul 2025 11:00:20 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BjP%2BCZEbFLURY0XafyffqcbLIZ2e8Dy2zaiz567xXufNmlx0PjoLhtydGkUV5If4mURSTm%2BKCHG09HtjcYAjoVEw0xN63GJs"}]}
cf-cache-status: BYPASS
content-encoding: br
set-cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6; HttpOnly; SameSite=Lax; Secure; Path=/
cf-ray: 958da3887cf8b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET multiup.io/build/app.3a8e05b1.css
104.21.112.1200 OK 622 kB URL
multiup.io/build/app.3a8e05b1.css
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type ASCII text, with very long lines (61854)
First Seen 2023-04-22
Last Seen 2025-07-30
Times Seen 253
Size 622 kB (621844 bytes)
MD5 8cb6aed291b0b6f3837bd1593ac8db7a
SHA1 2b585c217008e290a59c19840d7ca43997fc7f6e
SHA256 c90d1244813a964cb1c495da3bbe5b2c21d37732f5b1c2ad3e5a2f9868339a6e
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/app.3a8e05b1.css HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8LSpTZMTZWu1QnVHQPjvwLOrlSvOvinuj5%2FU0%2FoR5VDQYo5Tk4aAswotTTEL0DBI0ejXP49dE4xfubCsFIYAaz71%2FSNRfTVOJHnWTP6rYSD%2FaKsnBpl028cYhWHk"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-97d14"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 285
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da38c6acc56c7-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3109&min_rtt=750&rtt_var=1849&sent=64&recv=85&lost=0&retrans=0&sent_bytes=9423&recv_bytes=7317&delivery_rate=576384&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18060&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=265&inflight_dur=29&x=40"
GET multiup.io/build/app.6b0cbd46.js
104.21.112.1200 OK 188 kB URL
multiup.io/build/app.6b0cbd46.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, ASCII text, with very long lines (65466)
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 261
Size 188 kB (188405 bytes)
MD5 6f77d251bacf7b2935dbe06ebbee0cf7
SHA1 c99c89d26212e7283c0b164c00e6d99fbac59b61
SHA256 e90703f0dcd04fd8f404c7409417a27f910bfb70e3aab6a6960aa0d3bc329793
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/app.6b0cbd46.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MT0nMhfTrksQFqSTlx3Rb34nk4waBw1EtTjjX1gvA4ABYA6xzJs1BdZQRrtSw4XlCIWSYQhGG%2Fk8%2FT5AR1LL5A6hKnznQUmOssteMUD69SM6%2FfgqEMhjHbCqlRrn"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
vary: Accept-Encoding
etag: W/"6481d6c5-2dff5"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 5777
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da38c7ad056c7-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3109&min_rtt=750&rtt_var=1849&sent=67&recv=85&lost=0&retrans=0&sent_bytes=10907&recv_bytes=7317&delivery_rate=576384&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18060&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=266&inflight_dur=30&x=40"
GET multiup.io/assets/javascripts/theme.js
104.21.112.1200 OK 113 kB URL
multiup.io/assets/javascripts/theme.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, ASCII text, with very long lines (2076), with CRLF line terminators
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 260
Size 113 kB (112659 bytes)
MD5 960ba50181ebb13aa94e4ce229800a3e
SHA1 480e746ad1870f9d026e141a736e5b3092a641ef
SHA256 5b997a5c4edb2871e7a5fcd1da037ef83063fd7707dec8cb1f5ef72b9cbb10c5
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /assets/javascripts/theme.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MjnkGkGqKL5Pk5r%2BUSs2Zgvbrpsqog0dH%2B7JVdqP1Z0ISgxHrWji6jD2iihrhGw0CCEebVDDxSMRvoXbBVE0dZZFiccK3ZaNj%2FqQBQBdfX18NgQ4HmQMW4GXLJsy"}],"group":"cf-nel","max_age":604800}
last-modified: Sat, 30 Dec 2017 09:43:01 GMT
vary: Accept-Encoding
etag: W/"5a475fa5-1b813"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 5278
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da38c7ad156c7-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2079&min_rtt=0&rtt_var=2030&sent=112&recv=89&lost=0&retrans=0&sent_bytes=70177&recv_bytes=7496&delivery_rate=3480910&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=36120&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=281&inflight_dur=43&x=40"
GET multiup.io/assets/javascripts/theme.init.js
104.21.112.1200 OK 12 kB URL
multiup.io/assets/javascripts/theme.init.js
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type JavaScript source, ASCII text, with CRLF line terminators
First Seen 2023-03-09
Last Seen 2025-07-30
Times Seen 261
Size 12 kB (12419 bytes)
MD5 12b8112503f03174141accfaddfea377
SHA1 32cd1f053775dd6e57d59b62891c42a8e15337a0
SHA256 cd154ef50731da006417c6efeb24ed614d9d6a16533768009b3f4bc1023c7fdc
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /assets/javascripts/theme.init.js HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:20 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B5S69OAMN42GfeFMblJ2vnxBk%2BLu%2B1dflvGMvmWUs0lw9xY3Adc7caqq3Fi4Ot5%2BkztYJG4X03PvlDYAmnjpELMWbepW0sneC85ByeSHYLADXJWkttVdbeedPvyz"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 29 May 2017 18:26:32 GMT
vary: Accept-Encoding
etag: W/"592c67d8-3083"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
age: 5777
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 958da38c8ad456c7-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2079&min_rtt=0&rtt_var=2030&sent=93&recv=89&lost=0&retrans=0&sent_bytes=45257&recv_bytes=7496&delivery_rate=3480910&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=36120&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=275&inflight_dur=38&x=40"
GET riraconianstar.com/b3l5QVpARhoyZyIXCQw/OCg/EjQfMy8mACAdPDE+LRJMdgleKF81MwtESHBjWkFPeXwfEB18a0kKDSAuGgpEcHwGFx8uZ0kPRHB0XE1XcmxBTF80Z15fDTE7CERIZyobDRV8a1hMSHVvW0lLcGhcSQ
172.67.136.180204 No Content 0 B URL
riraconianstar.com/b3l5QVpARhoyZyIXCQw/OCg/EjQfMy8mACAdPDE+LRJMdgleKF81MwtESHBjWkFPeXwfEB18a0kKDSAuGgpEcHwGFx8uZ0kPRHB0XE1XcmxBTF80Z15fDTE7CERIZyobDRV8a1hMSHVvW0lLcGhcSQ
IP / ASN
172.67.136.180
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject riraconianstar.com
Fingerprint DB:20:3D:89:46:1F:59:03:81:3F:99:72:2D:C1:A5:A6:0C:6F:82:89
Validity Wed, 11 Jun 2025 06:23:10 GMT - Tue, 09 Sep 2025 07:21:36 GMT
GET /b3l5QVpARhoyZyIXCQw/OCg/EjQfMy8mACAdPDE+LRJMdgleKF81MwtESHBjWkFPeXwfEB18a0kKDSAuGgpEcHwGFx8uZ0kPRHB0XE1XcmxBTF80Z15fDTE7CERIZyobDRV8a1hMSHVvW0lLcGhcSQ HTTP/1.1
Host: riraconianstar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 11:00:21 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fLznJe%2BySx%2BoonrWdWfjg4WE1TAK65uV9ncqLRYnyS9eFSyboktToXgq3p2ne%2B5r4kviPv8aSzpTow8aOdPU%2FXG3olgV9kBU7F1AyxW2zOw%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 958da3911fc8b4eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open SansBold1.10;1ASC;OpenSans-BoldOpe
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 878
Size 28 kB (28192 bytes)
MD5 7e08cc656863d52bcb5cd34805ac605b
SHA1 f6e1c78441d4ca2ef589ce79e48d3dbf9dca9a0d
SHA256 0782a52179d0e25f19c39b43253795b25787d65abdbd8bfa38be0f21a4512748
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
Validity Mon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
GET /s/opensans/v15/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18670
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 10:17:47 GMT
expires: Fri, 26 Jun 2026 10:17:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:43 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 520956
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET multiup.io/build/fonts/fontawesome-webfont.20fd1704.woff2
104.21.112.1200 OK 77 kB URL
multiup.io/build/fonts/fontawesome-webfont.20fd1704.woff2
IP / ASN
104.21.112.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
First Seen 2023-04-05
Last Seen 2025-08-03
Times Seen 165352
Size 77 kB (77160 bytes)
MD5 af7ae505a9eed503f8b8e6982036873e
SHA1 d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
SHA256 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Certificate Info
Issuer Google Trust Services
Subject multiup.io
Fingerprint FD:87:50:79:63:7E:38:E4:7B:FE:A5:0E:74:EC:6F:47:BF:A3:ED:B4
Validity Tue, 01 Jul 2025 21:49:49 GMT - Mon, 29 Sep 2025 22:46:00 GMT
GET /build/fonts/fontawesome-webfont.20fd1704.woff2 HTTP/1.1
Host: multiup.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/build/app.3a8e05b1.css
Cookie: PHPSESSID=trmiaoiqp2lnt5g02qb29ethq6
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 02 Jul 2025 11:00:21 GMT
content-type: application/font-woff2
content-length: 77160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YWHxJ2WUrjlwexFO5iJvSV5PSDkcXcA4jDZPY3iAcribH6gRXuCueHKOM1nVl4Xne3s0wZlNvVB10W4a6enFZDIE6H3UD5OyEH9Kbml8SocSv2SCL63PpLP7Sfcd"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 08 Jun 2023 13:25:25 GMT
etag: "6481d6c5-12d68"
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
accept-ranges: bytes
age: 5276
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 958da391db1056c7-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1033&min_rtt=0&rtt_var=1044&sent=391&recv=115&lost=0&retrans=0&sent_bytes=447354&recv_bytes=9365&delivery_rate=13680826&ss_exit_cwnd=36120&ss_exit_reason=2&cwnd=36002&unsent_bytes=0&cid=e3b1beaadc6d5c4c&ts=1131&inflight_dur=108&x=40"
GET accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
173.194.221.84302 Found 0 B URL
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP / ASN
173.194.221.84
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
Validity Tue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:k3nUBsDLoQmTFRlm6pBCY3BAOA2nEA:0xceMtgfPgxxf7ih; Expires=Fri, 02-Jul-2027 11:00:22 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 11:00:22 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiNXjp18b3AxuRPI33h_ZZYclP4HItc45HNp2yPgFvjYkGlYe69DgXwXCJr_fZse59R30kiVXw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-fmPCMkEytjuLfMrKzupD1A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET ukankingwithea.com/
104.21.32.1200 OK 27 B IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type ASCII text, with no line terminators
First Seen 2025-07-02
Last Seen 2025-07-02
Times Seen 1
Size 27 B (27 bytes)
MD5 fa00ef0b3f0ae5d33309510d47972531
SHA1 1a4677861c7accfbaf7eba889292cbe91efd5eb0
SHA256 2396b68cf77639b74d33f043244965d48c286ec94596e6e818e0c21b037bd593
Certificate Info
Issuer Google Trust Services
Subject ukankingwithea.com
Fingerprint BC:D9:DE:23:19:C0:7C:2B:35:05:12:80:A3:22:F2:D2:D2:6F:1F:B3
Validity Fri, 27 Jun 2025 13:58:09 GMT - Thu, 25 Sep 2025 14:56:56 GMT
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 02 Jul 2025 11:00:22 GMT
content-type: text/plain
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: https://multiup.io
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Gl0qeNxaWHfOF9%2B7mLWnC%2BqdPeAD61C2TR63FjKQz7B0Ha032MG6OgTur%2BuKYRvAXQi87gJGrLHrp94Q4SKjq6g6Sm%2FAzraxLbKAqbBRfSY%3D"}]}
content-encoding: br
set-cookie: csu=1303766076383890@1@1751454022; SameSite=None; Secure; Max-Age=31104000
cf-ray: 958da3970ea75694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiNXjp18b3AxuRPI33h_ZZYclP4HItc45HNp2yPgFvjYkGlYe69DgXwXCJr_fZse59R30kiVXw
173.194.221.84302 Found 0 B URL
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiNXjp18b3AxuRPI33h_ZZYclP4HItc45HNp2yPgFvjYkGlYe69DgXwXCJr_fZse59R30kiVXw
IP / ASN
173.194.221.84
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject accounts.google.com
Fingerprint 64:1A:E5:18:62:F2:30:A0:1B:A7:39:0A:F8:58:9A:62:66:5F:71:E0
Validity Tue, 17 Jun 2025 20:03:53 GMT - Tue, 09 Sep 2025 20:03:52 GMT
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AdBytiNXjp18b3AxuRPI33h_ZZYclP4HItc45HNp2yPgFvjYkGlYe69DgXwXCJr_fZse59R30kiVXw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://multiup.io/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:G-wZ3I49gXvl5wCIdMXZrUOxk7COKw:-y8y6mReU9je-N6v;Path=/;Expires=Fri, 02-Jul-2027 11:00:22 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 02 Jul 2025 11:00:22 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AdBytiOze_rY5glHwKe6oGv8B8PJRBOUZ1ZnddtGFz3niI3fkTg6Aay--2CIpEcEiLBnL6TVIK7FZA&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S824190531%3A1751454022343019
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-2_8rOcU0hZ4Af8oWOi-BXg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 414
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST cloudflareinsights.com/cdn-cgi/rum
104.16.80.73204 No Content 0 B URL
cloudflareinsights.com/cdn-cgi/rum
IP / ASN
104.16.80.73
#13335 CLOUDFLARENET
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-03
Times Seen 5619391
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Google Trust Services
Subject cloudflareinsights.com
Fingerprint 9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5
Validity Wed, 25 Jun 2025 22:10:34 GMT - Tue, 23 Sep 2025 23:10:19 GMT
POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1154
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 02 Jul 2025 11:00:23 GMT
access-control-allow-origin: https://multiup.io
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 958da39c8c4db4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;OpenSan
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 858
Size 28 kB (27604 bytes)
MD5 177cc92d2e8027712a8c1724abd272cd
SHA1 861b3593521709d9fa8a8efb6f40817dd7fa9337
SHA256 2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
Validity Mon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 11:58:29 GMT
expires: Fri, 26 Jun 2026 11:58:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 514914
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
142.250.74.35200 OK 28 kB URL
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP / ASN
142.250.74.35
#15169 GOOGLE
Requested by https://multiup.io/download/a322dbd62f6f3bed290704ba6f37860e/Beyond.Citadel.Update.v0.926-TENOKE.rar
Resource Info
File type TrueType Font data, 17 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Digitized data copyright � 2010-2011, Google Corporation.Open Sans LightRegular1.10;1ASC;OpenSan
First Seen 2023-05-02
Last Seen 2025-07-30
Times Seen 858
Size 28 kB (27604 bytes)
MD5 177cc92d2e8027712a8c1724abd272cd
SHA1 861b3593521709d9fa8a8efb6f40817dd7fa9337
SHA256 2289b94b0f245d3078128fbdd2a5c59648ddd94ac1a7dd749b2375596ac8d562
Certificate Info
Issuer Google Trust Services
Subject *.gstatic.com
Fingerprint 6C:DD:E7:B7:B0:02:A6:B7:4F:2D:EB:A1:11:A3:4B:1C:31:F9:07:F7
Validity Mon, 02 Jun 2025 08:36:37 GMT - Mon, 25 Aug 2025 08:36:36 GMT
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://multiup.io
DNT: 1
Connection: keep-alive
Referer: https://multiup.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18450
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jun 2025 11:58:29 GMT
expires: Fri, 26 Jun 2026 11:58:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 Oct 2017 21:49:35 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 514912
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2